Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File:                     8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier:          UTdnI7GlFhGaqA2txQOO1lCUZIVNgftYT1BivF+2YY8=
Subject key identifier:   C5:B4:44:EA:95:E4:B2:C7:C8:6D:77:BB:ED:09:8B:60:50:A5:49:B4
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer:       /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial:       018F22DCDF7F9C5EB8D9D5C253BDD26B2FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number:          1019
Signing time:             Sun 28 Apr 2024 04:00:51 +0000
Manifest this update:     Sun 28 Apr 2024 04:00:51 +0000
Manifest next update:     Mon 29 Apr 2024 04:00:51 +0000
Files and hashes:         1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: DTF/e7xbOBfQebAe0ZJVJ/PBsISoTcQS/IcZNb9CjjA=)
                          2: DT70jfq8FnbrzbyK8oTac5Z70lE.roa (hash: pjs+Dmg+ZqetWPqhd1Rd9AwIS2u/A6nGZRVBgntd0+4=)
                          3: LBg399Zim8fIErdK6Yjh9besgj8.roa (hash: osVObfLf66JuxuXDyTksSPkSVVTfmdMCq40UM8LHFks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dc:df:7f:9c:5e:b8:d9:d5:c2:53:bd:d2:6b:2f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
        Validity
            Not Before: Apr 28 04:00:51 2024 GMT
            Not After : Apr 29 04:00:51 2024 GMT
        Subject: CN=c5b444ea95e4b2c7c86d77bbed098b6050a549b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:cc:d1:51:2f:11:04:fb:c6:ea:78:39:24:
                    0d:95:55:7a:87:ab:f0:66:94:1f:18:98:90:26:1e:
                    29:e9:67:c0:99:88:30:e9:01:05:36:df:df:c4:06:
                    39:1b:2b:8e:33:44:ac:91:c4:43:f1:5a:ee:37:0d:
                    fc:c5:1f:8e:af:4a:58:b5:22:a0:bf:bf:43:27:52:
                    5c:49:0c:b7:77:a9:3f:97:9f:30:d8:c5:20:da:f1:
                    2d:7a:66:29:69:51:fc:5d:5b:5f:0b:57:51:f3:31:
                    b5:27:3e:73:0d:6c:6f:71:08:ab:eb:f0:af:2b:9b:
                    c6:cb:68:76:36:f3:8c:48:6a:c1:2f:db:88:22:bc:
                    05:9d:b7:b8:8b:ba:7c:48:75:fd:94:96:e0:49:5e:
                    15:fb:77:46:60:81:eb:2f:3e:ac:ec:63:9d:bf:26:
                    fc:de:01:ed:0a:0c:c0:6d:b3:83:02:7c:81:fb:19:
                    66:ac:cd:51:06:93:94:e9:ab:33:70:0f:64:ea:67:
                    1e:13:ce:82:3c:0f:29:ff:aa:22:1b:1a:4f:79:c6:
                    97:12:7a:c3:78:61:bd:c3:44:61:f5:25:3b:3f:29:
                    b8:b6:67:da:3d:49:c5:05:f7:15:16:5f:65:d0:00:
                    36:36:49:68:99:36:0e:9d:5c:9e:e3:1c:6e:90:21:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B4:44:EA:95:E4:B2:C7:C8:6D:77:BB:ED:09:8B:60:50:A5:49:B4
            X509v3 Authority Key Identifier:
                keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:23:f5:58:51:57:fe:e2:d8:aa:c4:44:a3:54:b6:7d:7b:
         a6:78:14:c5:d8:f4:47:ac:31:30:70:30:82:8c:17:73:1b:56:
         93:36:12:15:83:15:7c:3a:9a:70:22:0d:cf:2e:39:b9:4e:71:
         6c:e4:ed:4e:63:67:f1:e8:da:a3:c4:2c:6a:51:63:08:ca:50:
         b9:9c:62:6d:50:bf:39:6d:3a:fb:fa:bc:d5:4e:6b:60:3d:8c:
         12:a4:b0:d5:47:36:5c:e8:d4:dd:17:79:8e:aa:08:8e:38:a3:
         62:37:d3:06:df:a2:06:f9:69:38:5a:d0:86:ad:1c:e2:c6:37:
         2f:28:de:47:e9:03:57:40:bd:b0:05:92:f6:64:83:2f:57:6a:
         f5:96:a3:02:b2:41:1e:be:ed:a2:22:50:ff:96:56:4e:df:7a:
         3f:ca:cd:80:d5:7e:73:cd:65:f7:41:09:9d:e4:54:bf:87:cf:
         9a:ec:aa:2f:29:80:cf:37:ee:64:c6:c5:b3:4f:d1:2f:bf:d8:
         fa:0a:3a:77:3f:6a:71:fe:e8:13:45:e5:3a:58:d5:30:09:45:
         58:c9:0f:5b:1c:27:46:0f:77:55:65:e7:f1:95:ae:f5:58:41:
         5a:5d:f8:02:ce:7f:f7:18:64:9d:c2:59:3f:64:42:2c:cd:e7:
         20:1f:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:42:48 2024 by rpki-client on console-ams.rpki-client.org